Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
File:                     xaUP22PDxb0fR0h14JTxitF-H5Y.mft (raw, json)
Hash identifier:          xMqEgEC9H61fMLtzakEuhdmJcGdSggibJfIgUUA5DV8=
Subject key identifier:   23:CE:91:90:89:3A:03:13:6B:B1:E5:40:38:C2:61:3F:B8:74:33:D4
Authority key identifier: C5:A5:0F:DB:63:C3:C5:BD:1F:47:48:75:E0:94:F1:8A:D1:7E:1F:96
Certificate issuer:       /CN=F365F7E8AF/serialNumber=C5A50FDB63C3C5BD1F474875E094F18AD17E1F96
Certificate serial:       0437
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
Manifest number:          0435
Signing time:             Tue 27 Oct 2026 03:52:22 +0000
Manifest this update:     Tue 27 Oct 2026 03:52:21 +0000
Manifest next update:     Thu 29 Oct 2026 03:52:21 +0000
Files and hashes:         1: xaUP22PDxb0fR0h14JTxitF-H5Y.crl (hash: Qnr71QxER0n9FcJuRd1UzvO692RdgJhH/R6gTMFS3sk=)
                          2: C44EDCDE47A111F189DCF8F2CE1D38B0.roa (hash: 5wtUZaGAD6hnevPQoGy0Wp/M21ZmQcq4eTIcxSJMHIM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1079 (0x437)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365F7E8AF, serialNumber=C5A50FDB63C3C5BD1F474875E094F18AD17E1F96
        Validity
            Not Before: Oct 27 03:52:21 2026 GMT
            Not After : Oct 29 03:52:21 2026 GMT
        Subject: CN=6ae01ff5-3f95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a2:94:84:20:2f:80:66:92:02:7c:64:75:13:
                    76:8d:89:c4:03:77:77:e3:87:67:dd:44:b2:9e:5e:
                    ab:6d:20:f7:21:4c:3d:3b:7b:81:be:50:e1:f1:4a:
                    99:07:4f:ce:8f:74:4b:31:a5:8b:40:c3:a0:63:c9:
                    5f:ff:4c:54:88:3c:e2:ad:57:07:e2:ba:9d:c0:a3:
                    e4:e2:51:03:12:63:0d:a9:69:d2:bd:24:87:ef:59:
                    f5:e5:21:fb:77:6b:9a:9c:35:3a:45:1e:82:95:90:
                    d8:22:9c:77:7c:c9:ce:a4:d3:76:41:71:25:43:70:
                    9f:23:e9:a1:a8:93:69:ac:36:9b:9a:be:3b:f2:fa:
                    8b:92:c2:a8:17:4f:2a:59:07:16:3f:8c:19:33:06:
                    77:7b:bd:2b:8e:c0:36:a5:6f:7f:8d:e4:56:11:55:
                    c0:ab:5c:91:d7:dc:7d:31:f8:d7:df:82:93:70:9a:
                    98:bf:ee:44:39:81:4d:77:e7:58:94:bb:21:fb:57:
                    6c:a1:f2:7f:b3:ac:de:af:ae:fa:60:73:b7:03:38:
                    4a:89:77:b0:50:46:60:82:81:a3:38:e4:47:13:31:
                    b9:57:64:4b:9d:55:c7:c8:17:36:a5:2f:1a:7e:9a:
                    94:60:c4:23:0b:8a:72:6c:fd:7c:70:fb:75:f4:ec:
                    33:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:CE:91:90:89:3A:03:13:6B:B1:E5:40:38:C2:61:3F:B8:74:33:D4
            X509v3 Authority Key Identifier:
                keyid:C5:A5:0F:DB:63:C3:C5:BD:1F:47:48:75:E0:94:F1:8A:D1:7E:1F:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:91:55:ec:34:21:30:93:88:fb:c2:02:68:fc:49:f0:77:96:
         4e:bb:0f:d5:6b:c5:cd:fd:e7:8d:ae:e3:d6:5c:39:c3:7f:dc:
         d3:81:c2:d4:06:11:aa:4a:70:46:51:a4:ea:3c:6c:d9:74:40:
         a2:aa:df:82:a1:07:2b:4e:23:76:de:a4:a0:c4:ec:44:db:42:
         6f:16:14:21:78:8e:9c:f8:01:8a:e9:f0:ac:64:80:85:0b:87:
         fe:26:97:56:5d:a2:00:1d:31:ae:77:59:8d:00:59:e0:58:32:
         5c:93:0b:9f:ee:cb:1f:db:93:d6:4b:97:03:6b:d1:63:3d:83:
         22:3a:c6:d5:03:08:ad:b5:c5:20:72:fe:39:8a:49:b3:b2:fe:
         aa:d4:f8:4a:93:f5:52:07:26:8c:9c:e7:af:b6:c2:d6:8c:81:
         b7:55:81:7b:c6:15:3c:9e:9f:d1:e7:df:44:b6:17:69:2c:e4:
         a8:ab:bb:f5:cf:a6:8b:85:a6:89:56:e9:66:a0:12:1d:55:5c:
         f9:08:d1:5b:d1:81:8e:ac:2f:c0:86:9f:0d:24:c2:af:fb:bd:
         f5:d5:7d:a8:7a:51:da:8e:56:a8:11:6e:86:2f:53:0d:94:7e:
         7d:4b:ae:3a:25:c5:d3:dd:de:09:57:be:df:a2:81:4e:bd:58:
         cd:d6:9d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----